News for hackers. Stuff that matters.
Re:The xz attack shell script by teknoraver on Wednesday April 03, 2024 @05:35PM (#39923506)
Hi @rsc, I just saw your update on the timeline.

To be more precise, the first public comment asking to dlopenify lzma was dated 30 Jan by Daan: https://github.com/systemd/systemd/pull/31131#issuecomment-1...

The day after, it was reiterated by Lennart: https://github.com/systemd/systemd/pull/31131#issuecomment-1...

But if you look in the systemd repo there is a TODO file with a section of libraries which needs to be lazy loaded. liblzma was added in this list in June 2020 (https://github.com/systemd/systemd/commit/cdfd853744ee934869...) by Lennart, and removed by me just after that my PR was merged.

Re:The xz attack shell script by rsc on Wednesday April 03, 2024 @05:46PM (#39923633)
Updated. Thanks!